+ ADD kubernetes deployment

k8s/manifests/sys/0-namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: site-system

k8s/manifests/sys/default/mariadb.yaml

@@ -0,0 +1,40 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mariadb-my-cnf
+  namespace: default
+data:
+  config: |
+    [mariadb]
+    bind-address=*
+    default_storage_engine=InnoDB
+    binlog_format=row
+    innodb_autoinc_lock_mode=2
+    wait_timeout=30
+---
+apiVersion: k8s.mariadb.com/v1alpha1
+kind: MariaDB
+metadata:
+  name: mariadb
+  namespace: default
+spec:
+  image: mariadb:11.8.2
+  imagePullPolicy: IfNotPresent
+  myCnfConfigMapKeyRef:
+    key: config
+    name: mariadb-my-cnf
+  port: 3306
+  replicas: 1
+  resources:
+    limits:
+      cpu: 200m
+      memory: 1024M
+    requests:
+      cpu: 50m
+      memory: 128M
+  rootPasswordSecretKeyRef:
+    key: password
+    name: mariadb-root-pass
+    generate: true
+  storage:
+    size: 1Gi

k8s/manifests/sys/mariadb-operator.yaml

@@ -0,0 +1,22 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: mariadb-operator-crds
+  namespace: site-system
+spec:
+  chart: mariadb-operator-crds
+  repo: https://mariadb-operator.github.io/mariadb-operator
+  version: 25.8.3
+---
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: mariadb-operator
+  namespace: site-system
+spec:
+  chart: mariadb-operator
+  repo: https://mariadb-operator.github.io/mariadb-operator
+  targetNamespace: site-system
+  version: 25.8.3
+  valuesContent: |
+    fullnameOverride: mariadb-operator

k8s/manifests/sys/sealed-secrets.yaml

@@ -0,0 +1,12 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: sealed-secrets
+  namespace: site-system
+spec:
+  repo: https://bitnami-labs.github.io/sealed-secrets
+  chart: sealed-secrets
+  targetNamespace: kube-system
+  version: 2.11.0
+  valuesContent: |
+    fullnameOverride: sealed-secrets-controller